- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, AC8 recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of AC8 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-4254Tenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflowCVE-2026-4253Tenda AC8 Web UploadCfg route_set_user_policy_rule os command injectionCVE-2026-4252Tenda AC8 IPv6 check_is_ipv6 ip address for authenticationCVE-2026-3044Tenda AC8 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflowCVE-2026-2203Tenda AC8 Embedded Httpd Service fast_setting_wifi_set buffer overflow| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-4254Tenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflow | Exploitation statusActively exploited | FixNo |
| SeverityCritical |
CVE-2026-4253Tenda AC8 Web UploadCfg route_set_user_policy_rule os command injection | Exploitation statusActively exploited | FixNo | Published03/16/2026 | SeverityMedium |
|---|
CVE-2026-4252Tenda AC8 IPv6 check_is_ipv6 ip address for authentication | Exploitation statusActively exploited | FixNo | Published03/16/2026 | SeverityCritical |
|---|
CVE-2026-3044Tenda AC8 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflow | Exploitation statusActively exploited | FixNo | Published02/23/2026 | SeverityHigh |
|---|
CVE-2026-2203Tenda AC8 Embedded Httpd Service fast_setting_wifi_set buffer overflow | Exploitation statusActively exploited | FixNo | Published02/09/2026 | SeverityHigh |
|---|
CVE-2026-2202Tenda AC8 httpd WifiGuestSet fromSetWifiGusetBasic buffer overflow | Exploitation statusActively exploited | FixNo | Published02/09/2026 | SeverityHigh |
|---|
CVE-2025-12618Tenda AC8 DatabaseIniSet buffer overflow | Exploitation statusActively exploited | FixNo | Published11/03/2025 | SeverityHigh |
|---|
CVE-2025-11120Tenda AC8 SetServerConfig formSetServerConfig buffer overflow | Exploitation statusActively exploited | FixNo | Published09/28/2025 | SeverityHigh |
|---|
CVE-2025-5799Tenda AC8 WifiExtraSet fromSetWirelessRepeat stack-based overflow | Exploitation statusActively exploited | FixNo | Published06/06/2025 | SeverityHigh |
|---|
CVE-2025-5798Tenda AC8 SetSysTimeCfg fromSetSysTime stack-based overflow | Exploitation statusActively exploited | FixNo | Published06/06/2025 | SeverityHigh |
|---|
CVE-2025-4368Tenda AC8 MtuSetMacWan formGetRouterStatus buffer overflow | Exploitation statusActively exploited | FixNo | Published05/06/2025 | SeverityHigh |
|---|
CVE-2025-1853Tenda AC8 Parameter SetIpMacBind sub_49E098 stack-based overflow | Exploitation statusActively exploited | FixNo | Published03/03/2025 | SeverityHigh |
|---|
CVE-2025-0528Tenda AC8/AC10/AC18 HTTP Request telnet command injection | Exploitation statusActively exploited | FixNo | Published01/17/2025 | SeverityHigh |
|---|
CVE-2024-11745Tenda AC8 SetStaticRouteCfg route_static_check stack-based overflow | Exploitation statusActively exploited | FixNo | Published11/26/2024 | SeverityHigh |
|---|
CVE-2024-10280Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference | Exploitation statusActively exploited | FixNo | Published10/23/2024 | SeverityHigh |
|---|
CVE-2024-10130Tenda AC8 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow | Exploitation statusActively exploited | FixNo | Published10/18/2024 | SeverityHigh |
|---|
CVE-2024-10123Tenda AC8 saveParentControlInfo compare_parentcontrol_time stack-based overflow | Exploitation statusActively exploited | FixNo | Published10/18/2024 | SeverityHigh |
|---|
CVE-2024-4066Tenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow | Exploitation statusActively exploited | FixNo | Published04/23/2024 | SeverityHigh |
|---|
CVE-2024-4065Tenda AC8 SetRebootTimer formSetRebootTimer stack-based overflow | Exploitation statusActively exploited | FixNo | Published04/23/2024 | SeverityHigh |
|---|
CVE-2024-4064Tenda AC8 execCommand R7WebsSecurityHandler stack-based overflow | Exploitation statusActively exploited | FixNo | Published04/23/2024 | SeverityHigh |
|---|
CVE-2023-4744Tenda AC8 formSetDeviceName stack-based overflow | Exploitation statusActively exploited | FixNo | Published09/03/2023 | SeverityCritical |
|---|
21 Results | Page 1 of 1